tbenandClaude Opus 5.5
bd9744043e
A bot hook (bot_hooks) is a secret URL, POST /api/hooks/<token>, whose calls queue the hook's brief plus the raw body as a task, per user and bot like a routine. Only the token's hash is kept (shown once, rotatable); an optional HMAC-SHA256 signing secret is stored encrypted. Calls are rate limited per address and per hook, recorded in bot_hook_events (pruned daily), deduplicated by delivery id, and a call while the last run still waits joins its brief instead of queueing another. The payload is fenced data and HookRunNote tells the bot never to take instructions from it; failed runs retry like routines. A hook can instead watch a computer's browser notifications: the app installs a small watcher that owns org.freedesktop.Notifications on the sandbox's session bus, so Chrome hands it every notification (it only looks for that service at start-up, so Chrome is restarted once, never mid-task), and it posts each one to its hooks, optionally filtered. Computers reach the app at COMPUTER_APP_URL or the app container's name. Users make hooks in the conversation's Hooks modal and manage them all on /admin/routines; bots never create or change hooks. Co-Authored-By: Claude Opus 5.5 <[email protected]>
23 lines
733 B
TypeScript
23 lines
733 B
TypeScript
type Params = {
|
|
hook_id: number;
|
|
idempotency_key: string;
|
|
/**
|
|
* Calls before this (unix ms) no longer count.
|
|
*/
|
|
since: number;
|
|
};
|
|
|
|
/**
|
|
* A call to the hook with the same delivery id that was taken (queued a
|
|
* run or joined one) since `since`. A rejected call doesn't count, so a
|
|
* sender that fixed its signature can retry the same delivery.
|
|
*/
|
|
export default function seenHookCallSql({ hook_id, idempotency_key, since }: Params) {
|
|
return {
|
|
sql: `SELECT id FROM bot_hook_events
|
|
WHERE hook_id = ? AND idempotency_key = ? AND status IN ('queued', 'merged') AND created_at > ?
|
|
LIMIT 1`,
|
|
values: [hook_id, idempotency_key, since] as (string | number)[],
|
|
};
|
|
}
|